Storm Procurement Limited Policy Title:
Withdrawal of Consent
Policy No:
007
Effective date: 21st April 2021 Owner: 1.
Version
1.02
Replaces
1.01
Data Protection Officer
Scope This procedure addresses the data subject(s) right to withdraw consent for the processing of his or her personal data. Withdrawal of consent by the data subject means an unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies withdrawal of consent to the processing of personal data relating to him or her. Withdrawal of consent shall be without effect to the lawfulness of processing based on consent before its withdrawal. Whereas consent covered all processing activities carried out for the same purpose or purposes, withdrawal of consent covers all processing activities carried out for the same purpose or purposes.
2.
Responsibilities
2.1 As a data controller, Storm Procurement, is responsible under the GDPR for administering withdrawal of consent from the data subject under advisement from Data Protection Officer / GDPR Owner. 3.1 Storm Procurement demonstrates the data subject has withdrawn consent to the processing of his or her personal data as recorded in the (SP_100 v1.01 - Data Subject Withdrawal Consent form). 3.2 Where the processing had multiple purposes, Storm Procurement demonstrates withdrawal of consent for each purpose as recorded in the (SP_100 v1.01 – Data Subject Withdrawal Consent form). 3.3 The processing activities that relied upon the consent is stopped in accordance with the relevant process. The Data Protection Officer will inform the relevant process owner of this change so that processing can be stopped. 3. Withdrawal of consent procedure Document Owner and Approval The Data Protection Officer is the owner of this document and is responsible for ensuring that this procedure is reviewed in line with the review requirements of the GDPR. A current version of this document is available to all members of staff on the company Intranet. This procedure was approved by the Data Protection Officer on 16th March 2018 and is issued on a version controlled basis under his/her signature. Signature:
Date:
Change History Record Issue 1.01 1.02
Description of Change Documentation Creation Withdrawal consent form numbering change
April 2021 SP007_Withdrawal of Consent v1.02
1
Approval SA SA
Date of Issue 16/03/18 21/04/21